Privacy policy
Last updated: 8 October 2026
This policy explains what personal data ViewStream collects, why, and what you can do about it. ViewStream is operated by Online Advertising & Video Streaming Solutions Ltd., Israel ("ViewStream", "we"). Questions and requests: [email protected].
1. Our two roles
For our customers (people and organisations with a ViewStream account) we decide how account data is used, and we are the controller of it. For the viewers of our customers' videos we process data on our customer's behalf, as their processor: the site or app that shows the video is responsible to its viewers, and we follow its instructions.
2. What we collect
- Account data: name, e-mail address, organisation name, a hashed password, your role, and when you accepted the terms and this policy.
- Billing data (paid plans): name or company name, company number or ID number, phone and invoices. Card details are entered on the payment provider's page (iCredit) and never reach us; we keep only a payment token and the last four digits.
- Content you upload: videos, images, titles, descriptions and other metadata, and what our systems derive from them (encoded versions, thumbnails, subtitles, summaries and other AI outputs).
- Technical and security data: IP addresses and request details in server, API and delivery logs; at sign-up we keep only a salted hash of the IP address, to limit abuse. Studio activity is recorded in an audit log.
- Support: what you write to us and our replies.
- Viewer statistics (for our customers' videos): playback events, device and browser type, country and network (ASN), and a pseudonymous viewer ID. The player keeps a random ID in the browser's local storage (not a cookie); on our servers it is stored only as a hash unique to the publisher that changes every year, it is not linked to names, e-mail or IP addresses, and it is replaced after 13 months. When the browser sends Global Privacy Control or Do Not Track, or the publisher requires consent and none was given, no ID is stored.
3. Why we use it
To provide and secure the service (including fraud and abuse prevention), to bill you, to support you, to send service messages (verification, usage warnings, payments, security notices), to meet legal obligations (for example tax records), and to improve the service using aggregated statistics. For people in the EU/EEA, the legal bases are the contract with you, our legitimate interests in running and securing the service, legal obligations, and consent where the law requires it. We do not sell personal data and we do not use it for advertising profiles.
4. AI processing
Transcription, translation, summaries and other AI features run on ViewStream's own servers in Israel. Your content is not sent to third-party AI providers and is not used to train third-party models. AI outputs are labelled as such in Studio.
5. Who processes data for us
- Interhost — hosting, data centres and mail relay in Israel.
- Cloudflare — network, DNS, security, bot protection (Turnstile) and e-mail routing.
- iCredit and Rivhit — card payments and receipts (paid plans).
- Partner CDNs, only if a customer switches on multi-CDN delivery for its content.
We disclose data to authorities only when the law requires it.
6. Where data is stored
Accounts, content and statistics are stored on servers in Israel. Israel is recognised by the European Commission as providing an adequate level of data protection. Cloudflare operates a global network.
7. How long we keep it
- Sign-ups that were never confirmed: deleted 30 days after the confirmation link expired.
- Account data and content: while the account is active, and up to 90 days after it is closed (so an account closed by mistake can be restored), unless you ask us to delete it sooner.
- Invoices and receipts: as long as tax law requires (in Israel, generally 7 years).
- Logs: for a limited period, typically up to 90 days, longer only for a specific security investigation.
- Viewer statistics: as configured by the customer; the pseudonymous viewer ID is replaced after 13 months.
8. Security
Data is encrypted in transit; secrets and payment tokens are encrypted at rest; access is limited to staff who need it and is recorded in audit logs. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
9. Your rights
You may ask to see the data we hold about you, to correct it, or to delete it, under the Israeli Privacy Protection Law, 5741-1981, and, for people in the EU/EEA, under the GDPR (which also gives rights to restrict or object to processing and to data portability). Write to [email protected]; we answer within 30 days. Viewers of a customer's videos can ask the site that shows the video, or us, and we will help that customer. You may also complain to the Privacy Protection Authority in Israel or to your local data protection authority.
10. Cookies and local storage
This website does not use tracking cookies. Studio uses only the cookies it needs to keep you signed in. The video player uses the browser's local storage, not cookies, for the viewer ID described above and for your own player settings (volume, subtitles, where you stopped watching), which stay in your browser.
11. Children
ViewStream accounts are for organisations and adults. We do not knowingly open accounts for children under 16.
12. Changes
If we change this policy in a way that matters, we will tell account holders by e-mail or in Studio before the change applies. The date at the top shows the latest version.